cve/2023/CVE-2023-4037.md
2024-05-25 21:48:12 +02:00

826 B

CVE-2023-4037

Description

Blind SQL injection vulnerability in the Conacwin 3.7.1.2 web interface, the exploitation of which could allow a local attacker to obtain sensitive data stored in the database by sending a specially crafted SQL query to the xml parameter.

POC

Reference

No PoCs from references.

Github